Separately Collecting and Storing Form Contents

ABSTRACT

Apparatuses, systems and methods are described herein for separately collecting and storing form contents. Different information may be collected from a user on a form. Based on determining that portions of the form request a first type of information, an extended reality (XR) environment may be provided to the user. The user may provide the first type information via an input method in the XR environment. The user may provide a second type of information using a different input method outside of the XR environment. The first type of information may be processed and stored in a different database as compared to the second type of information. The database storing the first type of information may have a higher security standard than the database storing second type of information.

CROSS-REFERENCE TO RELATED APPLICATIONS

This application is a continuation of U.S. patent application Ser. No.16/824,804 titled “SEPARATELY COLLECTING AND STORING FORM CONTENTS” andfiled on Mar. 20, 2020. The aforementioned application is incorporatedby reference in its entirety.

FIELD OF USE

Aspects of the disclosure relate generally to computer hardware andsoftware that can be used to separately collect and store form contents.More specifically, aspects of the disclosure may provide apparatuses,systems, and methods for a user to fill out some fields of a form in anextended reality (XR) environment, i.e., a virtual/augmented/mixedreality (VR/AR/MR) environment, e.g., when the fields request privateinformation.

BACKGROUND

Extended reality (XR) technology is increasingly used in many aspects ofpeople's lives, such as gaming, learning, physical training, medicaldiagnosis, design, communication, etc. XR may encompass all real andvirtual environments generated by computer graphics and wearables. XRmay refer to virtual reality (VR), augmented reality (AR), and/or mixedreality (MR). VR may include all virtually immersive experiences. Thesecould be created using purely real-world content (e.g., a 360° pictureor video of Yosemite National Park), purely computer-generated (CG)content (e.g., a CG dragon in a gaming setup), or a hybrid of both. VRmay entail use of devices like the OCULUS RIFT® sold by FacebookTechnologies, LLC of Menlo Park, Calif., HTC VIVE® sold by HTCCorporation of New Taipei City, Taiwan, or GOOGLE CARDBOARD® sold byAlphabet Inc. of Mountain View, Calif. AR is an overlay of CG content onthe real world. An example of an AR environment is the AR environmentprovided in the POKEMON GO® mobile application by Niantic Corporation ofSan Francisco, Calif., where a user may catch CG POKEMON characters by alandmark in a city. Another example of an AR environment is the ARenvironment provided in the IKEA PLACE mobile application by Inter IKEASystems B.V. of Delft, the Netherlands, where a user may see how a CGfurniture piece fits in the user's living room. In this way, theaugmented content does not recognize the physical objects within areal-world environment. In other words, the CG content and thereal-world content are not able to respond to one another. MR removesthe boundaries between real and virtual interaction via occlusion.Occlusion means the CG objects can be visibly obscured by objects in thephysical environment. For example, a virtual soldier may hide behindyour closet door in a gaming setup in MR.

A user may have control over who the user may share the contentspresented in an XR environment with. For example, if a user does nottrust the people around them (e.g., in a room), the user may keep thecontents presented in the XR environment to themselves (rather than, forexample, displaying parts of the XR environment on a display). Also,data stored during XR activities may be secure in certain circumstances.XR technology providers may configure XR environments in a manner wherecertain data (e.g., user movements) is not stored, but other data (e.g.,chat logs) may be stored (e.g., for marketing purposes).

Maintaining privacy in circumstances where users fill out forms withprivate information is often critical. Traditional ways of filling outforms such as on a computer screen or on printed paper might not defendagainst peeking from people sitting/standing around the user. Evidenceof previously filled-out forms, such as electronic/paper copies ofprivate information, can expose users' private information to theft. Assuch, there is a strong need for improvements in the ways in which usersinput and submit private information to form collectors.

Aspects described herein may address these and other problems, andgenerally improve the security of collecting and storing form contents.

SUMMARY

The following presents a simplified summary of various aspects describedherein. This summary is not an extensive overview, and is not intendedto identify key or critical elements or to delineate the scope of theclaims. The following summary merely presents some concepts in asimplified form as an introductory prelude to the more detaileddescription provided below.

Aspects described herein may allow for apparatuses, systems, and methodsfor separately collecting and storing form contents. This may improvesecurity during the entry of information, such as private information,into a form, such as a paper or electronic form. These and otherbenefits may be achieved by collecting data for some fields of a form inan XR environment, while collecting data for other fields of the formoutside of the XR environment. After an XR device may acquire a formsuch as by looking up a form in a forms database based on a captured barcode, the XR device may discern what fields request private informationand what fields request non-private information. For the fields thatrequest private information, the XR device may present the fields in anXR environment to a user, where the user may enter information in theprotected XR environment. For other fields that request non-privateinformation, the user may continue to fill out them in a traditionalway, such as on a computer screen or on printed paper. The data thatcorrespond to private information may be stored in a database with addedencryption. The data that correspond to non-private information may bestored in a database with standard encryption. By collecting and storingform contents differently, private information may be provided withadded protection.

Some aspects described herein may provide a computer-implemented methodfor separately collecting and storing form contents. A camera of an XRdevice may capture a portion of a form, such as a bar code, a formnumber, a form name, etc. The form may be acquired by the XR device,such as by retrieving the form from a forms database based on the barcode, the form name, or the form number. A location of the XR device maybe determined, and forms may be retrieved based on the location. The XRdevice may determine that some fields of the form request privateinformation from a user, while other fields of the form only requestnon-private information from the user. For the fields that requestprivate information, the XR device may provide an XR environment to theuser. Additionally, and/or alternatively, a computing device associatedwith the XR device may provide to the user the XR environment. The XRdevice may display a representation of the form in the XR environment,which in some cases may display fields that request private information.The XR device may receive, from the user, data corresponding to thefields of the form that request private information. The reception ofthe data may be via an input method in the XR environment, such astyping on a virtual keyboard presented in the XR environment, checking abox presented in the XR environment, and/or using a finger or a virtualpen. For fields that request non-private information, the user mayprovide data via a different input method outside of the XR environment.Before receiving data from the user, the XR device may perform anauthorization check on the user to make sure the user is authorized tofill out the form and/or make changes to the form contents. The datacorresponding to private information may be stored in a first database.The XR device may obscure the data stored in the first database and maydisplay that data in the XR environment after receiving a request fromthe user. The data for the other fields may be stored in a seconddatabase. The first database and second database may have differentstorage and/or encryption schemes. After the data is stored, the usermay be prompted to destroy the form.

These features, along with many others, are discussed in greater detailbelow.

BRIEF DESCRIPTION OF THE DRAWINGS

The present disclosure is illustrated by way of example and not limitedin the accompanying figures in which like reference numerals indicatesimilar elements.

FIG. 1 depicts an illustrative computing device that may be used toimplement one or more illustrative aspects discussed herein.

FIG. 2 depicts an illustrative extended reality (XR) device.

FIG. 3 depicts an illustrative user wearing an illustrative XR deviceand an illustrative form.

FIG. 4 is a flow chart for a method of separately collecting and storingform contents.

DETAILED DESCRIPTION

In the following description of the various embodiments, reference ismade to the accompanying drawings, which form a part hereof, and inwhich is shown by way of illustration various embodiments in whichaspects of the disclosure may be practiced. It is to be understood thatother embodiments may be utilized and structural and functionalmodifications may be made without departing from the scope of thepresent disclosure. Aspects of the disclosure are capable of otherembodiments and of being practiced or being carried out in various ways.In addition, it is to be understood that the phraseology and terminologyused herein are for the purpose of description and should not beregarded as limiting. Rather, the phrases and terms used herein are tobe given their broadest interpretation and meaning.

By way of introduction, aspects discussed herein may relate to methodsand techniques for separately collecting, in and outside of an extendedreality (XR) environment, and storing form contents during informationcollection using a form.

Conventional form-filling processes, such as allowing users to fill outa paper form or enter their information into an electronic form using aninput device such as a keyboard, have numerous limitations.Specifically, during entry of private information (e.g., personallyidentifiable information, or PII), theft of the private information maybe effectuated by, for example, acquiring a copy of the paper form,photographing the paper form, intercepting signals from the keyboard, oreven looking over the shoulder of the user filling out the form. Forms,such as log-in forms, may be implemented in XR environments; however,such forms are rudimentary at best, and generally use the same flawedinput schema used outside of the XR environments.

Separately collecting private information in XR environments mayovercome the abovementioned limitations. The XR-enabled form-fillingsystems may improve the functioning of computers by improving thesecurity and flexibility with which computing devices receive and manageprivate information. In the XR environment, a user may have more controlover who they may share the information with and what part of theinformation they may share. For example, if the user trusts the peoplearound them, they may cast the contents presented in their XRenvironment to a display device for everyone to see. The user mayselectively cast certain parts of the form contents instead of all ofthe form contents depending on information sensitivity. If the user doesnot trust the people around them, they may enter private informationunder the protection of the XR headset and environment. It may be moredifficult for bystanders to peek at their form contents. By using aunique implementation of XR environments, the present system may allowusers to conveniently input information into forms while benefit fromthe privacy and security improvements which may be implemented in an XRenvironment. XR technology providers may commonly use the most advancedencryption and security standards in collecting and storing XR data.There may be always a risk in collecting, storing, and sharing data,however, the present disclosure is a significant improvement overinputting data using traditional manual input stationaries and/orcomputing device input devices.

Before discussing these concepts in greater detail, however, anillustrative computing device will first be discussed with respect toFIG. 1 . The computing device may be used to implement one or moreillustrative aspects discussed herein (e.g., providing and/or retrievinga digital form, storing data as a database, connecting with an XR deviceand providing an XR environment, etc.). An illustrative XR device willbe discussed with respect to FIG. 2 .

FIG. 1 illustrates one example of a computing device 101 that may beused to implement one or more illustrative aspects discussed herein. Forexample, computing device 101 may, in some embodiments, implement one ormore aspects of the disclosure by reading and/or executing instructionsand performing one or more actions based on the instructions. In someembodiments, computing device 101 may represent, be incorporated in,and/or include various devices such as a desktop computer, a computerserver, a mobile device (e.g., a laptop computer, a tablet computer, asmart phone, any other types of mobile computing devices, and the like),and/or any other type of data processing device.

Computing device 101 may, in some embodiments, operate in a standaloneenvironment. In others, computing device 101 may operate in a networkedenvironment. As shown in FIG. 1 , various network nodes 101, 105, 107,and 109 may be interconnected via a network 103, such as the Internet.Other networks may also or alternatively be used, including privateintranets, corporate networks, LANs, wireless networks, personalnetworks (PAN), and the like. Network 103 is for illustration purposesand may be replaced with fewer or additional computer networks. A localarea network (LAN) may have one or more of any known LAN topology andmay use one or more of a variety of different protocols, such asEthernet. Devices 101, 105, 107, 109 and other devices (not shown) maybe connected to one or more of the networks via twisted pair wires,coaxial cable, fiber optics, radio waves or other communication media.

Also as shown in FIG. 1 , an XR device 133 may be connected to thecomputing device 101 via, e.g., a USB cable, a HDMI cable, an AV cable,etc. The XR device 133 may be alternatively, and/or additionally,connected to the computing device 101 via the network 103. The computingdevice 101 may provide all or portions of an XR environment to the XRdevice 133. The XR device 133 may present a representation of the XRenvironment to a user of the XR device 133.

As seen in FIG. 1 , computing device 101 may include a processor 111,RAM 113, ROM 115, network interface 117, input/output interfaces 119(e.g., keyboard, mouse, display, printer, etc.), and memory 121.Processor 111 may include one or more computer processing units (CPUs),graphical processing units (GPUs), and/or other processing units such asa processor adapted to perform computations associated with machinelearning. I/O 119 may include a variety of interface units and drivesfor reading, writing, displaying, and/or printing data or files. I/O 119may be coupled with a display such as display 120. Memory 121 may storesoftware for configuring computing device 101 into a special purposecomputing device in order to perform one or more of the variousfunctions discussed herein. Memory 121 may store operating systemsoftware 123 for controlling overall operation of computing device 101,control logic 125 for instructing computing device 101 to performaspects discussed herein, application software 127, skill software 128,and other applications 129. Control logic 125 may be incorporated in andmay be a part of application software 127. In other embodiments,computing device 101 may include two or more of any and/or all of thesecomponents (e.g., two or more processors, two or more memories, etc.)and/or other components and/or subsystems not illustrated here.

Devices 105, 107, 109 may have similar or different architecture asdescribed with respect to computing device 101. Those of skill in theart will appreciate that the functionality of computing device 101 (ordevice 105, 107, 109) as described herein may be spread across multipledata processing devices, for example, to distribute processing loadacross multiple computers, to segregate transactions based on geographiclocation, user access level, quality of service (QoS), etc. For example,devices 101, 105, 107, 109, and others may operate in concert to provideparallel computing features in support of the operation of control logic125 and/or software 127.

FIG. 2 depicts an example of an XR device 202, which may be the same orsimilar as the XR device 133. The XR device 202 may be configured toprovide a VR, AR, and/or MR environment. The XR device 202 may becommunicatively connected to a first computing device 201, which may bethe same or similar as the computing device 101. The XR device 202 maycomprise a plurality of different elements, such as display devices 203a, audio devices 203 b, motion sensitive devices 203 c, cameras 203 d,position tracking elements 203 e, and input/output 203 f Such elementsmay additionally and/or alternatively be referred to as sensors. Othersuch elements, not shown, may include in-ear electroencephalographic(EEG) and/or heart rate variability (HRV) measuring devices, scalpand/or forehead-based EEG and/or HRV measurement devices, eye-trackingdevices (e.g., using infrared), or the like. The XR device 202 mayfurther comprise a second computing device 204, which may be the same orsimilar as the computing device 101. Not all elements shown in FIG. 2need to be present for operation of the XR device 202. For example, theXR device 202 might not have the cameras 203 d. As another example, theXR device 202 might lack a second computing device 204, such that thefirst computing device 201 directly interfaces with the display devices203 a, the audio devices 203 b, the motion sensitive devices 203 c, thecameras 203 d, the position tracking elements 203 e, and/or theinput/output 203 f to provide an XR environment. As yet another example,the second computing device 204 may be sufficiently powerful enough suchthat the first computing device 201 may be omitted.

The first computing device 201 and/or the second computing device 204need not have any particular processing power or functionality toprovide an XR environment. The first computing device 201 and/or thesecond computing device 204 may comprise, for example, relativelyunderpowered processors which provide rudimentary video and/or audio.The first computing device 201 and/or the second computing device 204may, for example, comprise relatively powerful processors which providehighly realistic video and/or audio.

Though described in many instances with respect to visually-based XRenvironments, the XR device 202 may provide audio-based XR environments.The XR device 202 need not have any of the display devices 203 a, andmay instead provide audio, touch, and/or scent-based environment(s). Forexample, the XR device 202 may provide an audio scenario in an XRenvironment which allows a user of the XR device 202 to practiceconversation skills. As another example, the XR device 202 may provide atouch-based scenario which allows a user of the XR device 202 topractice being comfortable with unexpected touch sensations.

The XR device 202 may provide a VR, AR, and/or MR environment to theuser. In general, VR environments provide an entirely virtual world,whereas AR and/or MR environments mix elements in the real world and thevirtual world. The XR device 202 may be a device specifically configuredto provide an XR environment (e.g., a VR headset), or may be acombination of devices (e.g., a smartphone inserted into a headset)which, when operated in a particular manner, provides an XR environment.The XR device 202 may be said to be untethered at least in part becauseit may lack a physical connection to another device (and, e.g., may bebattery powered). If the XR device 202 is connected to another device(e.g., the first computing device 201, a power source, or the like), itmay be said to be tethered. Examples of the XR device 202 may includethe VALVE INDEX VR device developed by Valve Corporation of Bellevue,Wash., the OCULUS QUEST VR device sold by Facebook Technologies, LLC ofMenlo Park, Calif., and the HTC VIVE® VR device sold by HTC Corporationof New Taipei City, Taiwan. Examples of the XR device 202 may alsoinclude smartphones which may be placed into a headset for VR purposes,such as the GEAR VR product sold by Samsung Group of Seoul, South Korea.Examples of the XR device 202 may also include the AR headsets sold byMagic Leap, Inc. of Plantation, Fla., the HOLOLENS® MR headsets sold byMicrosoft Corporation of Redmond, Wash., and NREAL LIGHT headsets soldby Hangzhou Tairuo Technology Co., Ltd. of Beijing, China, among others.Examples of the XR device 202 may also include audio-based devices, suchas the ECHO FRAMES sold by Amazon, Inc. of Seattle, Wash. All such VRdevices may have different specifications. For example, some VR devicesmay have cameras, whereas others might not. These are merely examples,and other AR/VR systems may also or alternatively be used.

The first computing device 201 may provide all or portions of an XRenvironment to the XR device 202, e.g., as used by a tethered OCULUSRIFT®. For example, the first computing device 201 may provide a videodata stream to the XR device 202 that, when displayed by the XR device202 (e.g., through the display devices 203 a), shows a virtual world.Such a configuration may be advantageous where the XR device 202 (e.g.,the second computing device 204 that is part of the XR device 202) isnot powerful enough to display a full XR environment. The firstcomputing device 201 need not be present for the XR device 202 toprovide an XR environment. For example, where the second computingdevice 204 is sufficiently powerful, the first computing device 201 maybe omitted, e.g., an untethered OCULUS QUEST.

The display devices 203 a may be any devices configured to display allor portions of an XR environment. Such display devices 203 a maycomprise, for example, flat panel displays, such as one or moreliquid-crystal display (LCD) panels. The display devices 203 a may bethe same or similar as the display 106. The display devices 203 a may besingular or plural, and may be configured to display different images todifferent eyes of a user. For example, the display devices 203 a maycomprise one or more display devices coupled with lenses (e.g., Fresnellenses) which separate all or portions of the displays for viewing bydifferent eyes of a user.

The audio devices 203 b may be any devices which may receive and/oroutput audio associated with an XR environment. For example, the audiodevices 203 b may comprise speakers which direct audio towards the earsof a user. As another example, the audio devices 203 b may comprise oneor more microphones which receive voice input from a user. The audiodevices 203 b may be used to provide an audio-based XR environment to auser of the XR device 202.

The motion sensitive devices 203 c may be any elements which receiveinput related to the motion of a user of the XR device 202. For example,the motion sensitive devices 203 c may comprise one or moreaccelerometers which may determine when a user of the XR device 202 ismoving (e.g., leaning, moving forward, moving backwards, turning, or thelike). Three dimensional accelerometers and/or gyroscopes may be used todetermine full motion of the XR device 202. Optional external facingcameras 203 d may be used for 3D orientation as well. The motionsensitive devices 203 c may permit the XR device 202 to present an XRenvironment which changes based on the motion of a user.

The cameras 203 d may be used to aid in the safety of the user as wellas the presentation of an XR environment. The cameras 203 d may be usedto monitor the surroundings of a user so as to avoid the userinadvertently contacting elements (e.g., walls) in the real world. Thecameras 203 d may additionally and/or alternatively monitor the user(e.g., the eyes of the user, the focus of the user's eyes, the pupildilation of the user, or the like) to determine which elements of an XRenvironment to render, the movement of the user in such an environment,or the like.

The position tracking elements 203 e may be any elements configured toaid in the tracking of the position and/or movement of the XR device202. The position tracking elements 203 e may be all or portions of asystem of infrared emitters which, when monitored by a sensor, indicatethe position of the XR device 202 (e.g., the position of the XR device202 in a room). The position tracking elements 203 e may be configuredto permit “inside-out” tracking, where the XR device 202 tracks theposition of one or more elements (e.g., the XR device 202 itself, auser's hands, external controllers, or the like) or “outside-in”tracking, where external devices aid in tracking the position of the oneor more elements.

The input/output 203 f may be configured to receive and transmit dataassociated with an XR environment. For example, the input/output 203 fmay be configured to communicate data associated with movement of a userto the first computing device 201. As another example, the input/output203 f may be configured to receive information associated with otherusers of a massively multiplayer XR environment.

The second computing device 204 may be configured to provide, via thedisplay devices 203 a, the audio devices 203 b, the motion sensitivedevices 203 c, the cameras 203 d, the position tracking elements 203 e,and/or the input/output 203 f, the XR environment. The second computingdevice 204 may comprise one or more processors (e.g., a graphicsprocessor), storage (e.g., that stores virtual reality programs), or thelike. In general, the second computing device 204 may be powerful enoughto provide the XR environment without using the first computing device201, such that the first computing device 201 need not be required andneed not be connected to the XR device 202. In other configurations, thesecond computing device 204 and the first computing device 201 may workin tandem to provide the XR environment. In other configurations, the XRdevice 202 might not have the second computing device 204, such that thefirst computing device 201 interfaces with the display devices 203 a,the audio devices 203 b, the motion sensitive devices 203 c, the cameras203 d, the position tracking elements 203 e, and/or the input/output 203f directly.

The above-identified elements of the XR device 202 are merely examples.The XR device 202 may have more or similar elements. For example, the XRdevice 202 may include in-ear EEG and/or HRV measuring devices, scalpand/or forehead-based EEG and/or HRV measurement devices, eye-trackingdevices (e.g., using cameras directed at users' eyes, pupil tracking,infrared), or the like.

Having discussed several examples of computing devices and XR deviceswhich may be used to implement some aspects as discussed further below,discussion will now turn to apparatuses, systems, and methods forseparately collecting and storing form contents.

FIG. 3 depicts an illustrative user wearing the XR device 202 and a form300. Though depicted as a headset in FIG. 3 , the XR device 202 may bein other forms such as goggles, small-screen devices, helmets, contactlenses, earphones, etc. The form 300 may comprise a bar code 301, anissue entity 302, a form number 303, a form name 304, one or more formfields such as application date field 305, applicant name field 306,marital status field 307, personally identifiable information (PII)field 308, etc., an authorization check 309, form instructions 310, andother form elements.

The bar code 301 may be a one-dimensional barcode (e.g., UPC-A, EAN 8,Industrial 2 of 5, Codabar, Code 11, Databar, etc.) and/or atwo-dimensional barcode (e.g., QR Code, DataMatrix, MaxiCode, AztecCode, etc.). The bar code 301 generally represents a quick way toretrieve and locate the form 300. The bar code 301 might not be anactual bar code. The bar code 301 may be a general identifier such as animage, a URL link, and the like.

The issue entity 302 may be the entity that issues the form 300. Forexample, the issue entity 302 may be a government agency, a hospital, abank, a leasing office, a questionnaire sponsor, and the like. There maybe a database of forms for the issue entity 302. Knowing the issueentity 302 may assist in retrieving and locating the form 300.

The form number 303 may be an identifier of the form 300. The formnumber 303 may comprise a series of alphanumerical characters. The formnumber 303 may be a unique identifier of the form 300 for each issueentity 302. The form number 303 may be used to retrieve and locate theform 300 in a database, by itself, and/or in combination with otheridentifiers such as the issue entity 302.

The form fields (e.g., 305-308) may be fields requesting informationfrom a user to achieve a purpose of form-filling. The form 300 maycomprise one or more fields that may request non-private information.For example, the form 300 may comprise a filed requesting an applicationdate 305, which may in this context be non-private information. The form300 may comprise one or more fields that may request information thatmay be deemed private or non-private based on different criteria. Forexample, the form 300 may comprise a field requesting an applicant name306, and/or a marital status 307. The applicant name 306 and maritalstatus 307 fields might be private or public, depending on the nature ofthe form (e.g., whether it is a medical record, a voter record, etc.).The form 300 may comprise one or more fields that may request privateinformation. For example, the form 300 may comprise a field requestingPII 308. The criteria as for whether the information requested isprivate or non-private may be determined by a form issue entity (e.g.,the federal government), a location (e.g., a hospital) where the form isfilled, or other similar considerations.

The authorization check 309 may comprise ways to authenticate a userfilling out the form. The authorization check 309 may be a signaturefield which may be part of the form. For example, the XR device 202 mayperform a handwriting validation based on a handwritten signature. Theauthorization check 309 may comprise other ways which may not be part ofthe form. These other ways may comprise, e.g., requesting a facialimage, requesting an indication (e.g., text message, telephonic call,passcode, etc.) on a different device, and/or requesting an indication(e.g., moving a box) in the XR environment. The authorization check 309may ascertain that the user is authorized to fill out the form or makechanges to the form contents. The authorization check 309 may comprise arequest for biometric data associated with the user. The biometric datamay comprise one or more of a signature, a fingerprint, a facial image,etc. The authorization check 309 may comprise an indication, from adifferent device (e.g., a mobile phone) than the XR device 202, that theuser is authorized to fill out the form. The indication may comprise oneor more of a text message, a telephonic call, a passcode, etc. Theauthorization check 309 may comprise a second indication of a task,performed by the user, in the XR environment. The second indication ofthe task may comprise completing one more tasks in the XR environment,such as moving a block from one location to another location, correctlyidentifying images with a car in them, answering a security question,etc.

The form instructions 310 may comprise one or more instructions toexplain to a user what information each field is requesting, and how theinformation (e.g., format of a date) may be entered. The forminstructions 310 may contain information that may be used to retrieveand locate the form 300, by itself and/or in combination with other formelements.

Each form may have a form format that may be exemplified by an orderingof each form element (e.g., 301-310). The form format may alternatively,and/or additionally be used to retrieve and locate the form 300, byitself and/or in combination with other form elements.

The XR device 202 may use any of the elements (e.g., 301-310) of theform to retrieve all or portions of the form 300. The camera 203 d ofthe XR device 202 may capture an entire form (e.g., the form 300).Alternatively, the camera 203 d of the XR device 202 may capture one ormore form elements (e.g., the bar code 301, the issue entity 302, theform number 303, the form name 304, the form fields 305-308, theauthorization check 309, and/or the form instructions 310). The XRdevice 202 may retrieve all or portions of the form 300 based on thecaptured form element(s). The form 300 may be determined to be in aspecific form format based on the ordering of the form elements. Thecamera 203 d of the XR device 202 may capture all or a portion of theform 300. The XR device 202 may analyze the form format based on thecaptured all or portion of the form 300. The XR device 202 may thenretrieve the form 300 based on the analyzed form format. Whether thecamera 203 d of the XR device 202 captures the entire form, or the XRdevice 202 retrieves all or portions of the form, the XR device 202 maypresent either the entire form to the user in the XR environment, orportions of the form to the user in the XR environment. The virtualreality device might only present fields requesting private informationfrom the user.

The form 300 may be filled out digitally such as using a digital pen, amouse, a keyboard, a touchscreen, or a voice command receiver. When theform 300 is filled out digitally, the data may be entered by a user onthe first computing device 201, the second computing device 204, etc.The data may alternatively, and/or additionally, entered by the user viathe display device(s) 203 a, the audio device(s) 203 b, the input/output203 f, etc., of the XR device 202. If all or portions of the form 300correspond to a paper form, the form 300 may be filled out physicallysuch as using an ink pen, a ballpoint pen, a pencil, a highlighter, astencil, or other similar manual input stationaries. Whether the form300 is filled out digitally or physically, the form contents may beexposed to the public. For example, the public may peek on a device onwhich the form is being filled out digitally, or the public may peek ona paper form when the form is being filled out using a pen or pencil.Whether the form 300 is filled out digitally or physically, the formcontents may be retrieved and restored. For example, when the form 300is filled out digitally, the form contents may be retrieved byrecovering data entry inputs. This may be the case especially during adata breach, where sophisticated measures are taken to retrieve andrestore data. When the form 300 is filled out physically (e.g., using apen or pencil), the form contents may be recognized by following inktraces. Even after the form 300 (e.g., paper form) is destroyed anddiscarded in garbage, criminals may still retrieve and repair the formand figure out the form contents based on the ink traces.

The form 300 may be filled out in an XR environment. The XR environmentmay, for example, be provided by the first computing device 201 via theXR device 202. The XR device 202 may display a representation of theform in an XR environment. The representation of the form may be in thesame format as the form 300. The representation of the form may be in adifferent format from the form 300. For example, the representation ofthe form may be a number of individual form fields in any arrangementwhich collectively collect all data requested by the form 300. Thearrangement of the individual form fields may be randomized. After eachindividual form field is filled out in the XR environment, a nextindividual form field may be shown. After all individual form fields arefilled out in the randomized arrangement, the XR device 202 may generatethe entire form in the original order. The randomization may furtherimprove form security because it may be more difficult for databreachers to correspond form contents to randomized form fields. Eachindividual form field may also be in a different format than itscorresponding form field on the form 300. For example, form field 307requesting a marital status may be represented as two images, one imagecomprising a single person, another image comprising a couple.

There may be different ways of filling out the form 300 in the XRenvironment provided by the XR device 202. For example, the user may beinstructed to type on a virtual keyboard presented in the XRenvironment. The user may be instructed to select a box or an image toanswer a multiple-choice question. The user may be instructed to make agesture imitating a check to mark a choice. The form 300 may be filledout by tracing a movement of a gesture or a pen. When all or portions ofthe form 300 are filled out in the XR environment, the user may wear theXR device 202. The representation of the form 300 might only be accessedby the user wearing the XR device 202. The form contents may not be seenby the public. The form contents may be stored without storing how theform fields are filled out (e.g., not storing the movement of thegesture or the pen). In case of a data breach, it may be more difficultto retrieve, repair, and restore the form contents. The filled contentdata may be more secure.

FIG. 4 depicts a method 400 for separately collecting and storing formcontents. At step 401, a location of the XR device 202 may bedetermined. The location of the XR device 202 may be determined based onGPS coordinates of the XR device 202. The location of the XR device 202may be further determined based on a search history or a navigationrequest in a map application on a second computing device associatedwith the XR device 202. The location of the XR device 202 may be furtherdetermined based on electronic communications (e.g., a text message of“I am going to the bank”) in a messaging application on a secondcomputing device associated with the XR device 202. The location of thevirtual reality device may be further determined based on social mediaposts (e.g., a social media post of “At the hospital. Being sick isterrible!”) in a social media application on a second computing deviceassociated with the XR device 202. Retrieving the form 300 may be basedon the determined location of the XR device 202. For example, if the XRdevice 202 is determined to be in a bank, forms associated with the bankmay be retrieved. At the bank location, forms associated with the bankmay have a higher priority to be retrieved than forms associated withother locations such as a hospital.

At step 402, a portion of a form may be captured. The portion of theform may be captured using a camera of the XR device 202. A camera 203 dof the XR device 202 may capture an entire physical form or an entiredigital form displayed on a computing device (e.g., a computer, a mobilephone, a touch-screen display, etc.). Alternatively, and/oradditionally, the camera 203 d of the XR device 202 may capture one ormore form elements (e.g., the bar code 301, the issue entity 302, theform number 303, the form name 304, the form fields 305-308, theauthorization check 309, and/or the form instructions 310) of the form.A form format may further be determined based on the captured portion ofthe form.

At step 403, a form (e.g., the form 300) may be acquired. The form maybe acquired by an XR device (e.g., the XR device 202). The XR device 202may retrieve the form from a forms database based on the captured formelements (e.g., the bar code 301, the issue entity 302, the form number303, the form name 304, the form fields 305-308, the authorization check309, and/or the form instructions 310). The XR device 202 may furtherretrieve the form based on the format of the form itself. Theacquisition of the form may be based on a determined location of the XRdevice 202. The location may be determined based on GPS coordinates,search history or navigation request in a map application, electroniccommunications, social media posts, etc., associated with the XR device202. Alternatively, and/or additionally, a first computing device (e.g.,the first computing device 201) may download, retrieve, and/or locatethe form, and then send the form to the XR device 202.

At step 404, the XR device 202 may determine whether private informationis requested by one or more form fields of the acquired form. Forexample, a field requesting an application date, such as the field 305,might not be determined as private information in some occasions. Afield requesting PII such as the field 308 may be determined as privateinformation. Some fields such as field 306 requesting applicant name andfield 307 requesting marital status may be determined as privateinformation based on some criteria, but may be determined as non-privateinformation based on other criteria. The criteria may be determined bythe issue entity 302 (e.g., the federal government, a questionnairesponsor) or the location (e.g., a hospital, a bank, a leasing office)collecting the form contents. The issue entity 302 and/or the locationmay have rules, and/or regulations defining what information may beconsidered private. There may be additionally federal, state, and locallaws and regulations governing certain information to be private in someoccasions (e.g., voter registration information). These criteria may bestored as a policy at a location in the database storing all the formsfor the issue entity 302 and/or the location. As the XR device 202retrieves the form, the XR device 202 may check each form field againstthe policy and determine which form field requests private informationbased on the policy. The policy may be updated to include the up-to-daterules, regulations, and/or laws.

At step 406, if the XR device 202 determines that private information isbeing requested by one or more fields of the form in step 404, an XRenvironment may be provided to a user. The XR environment may beprovided fully or partially by the first computing device 201. The XRenvironment may be implemented by the XR device 202. The XR device 202may be connected to the first computing device 201 via a USB cable, anHDMI cable, an AV cable, etc. Alternatively, and/or additionally, the XRdevice 202 may be connected to the first computing device 201 via anetwork, e.g., the Internet. The XR environment may be accessed by theuser via the XR device 202, e.g., as a headset.

At step 408, the XR device 202 may display a representation of the formin the XR environment. The entire form or a portion of the form may bedisplayed. The portion of the form may comprise fields that requestprivate information. The form may be displayed in the XR environment ina way that may facilitate inputting data entries. For example, for afield that requires checking a box, the same field may be displayed astouching one option out of a few options in the XR environment. Forexample, for a field that requires spelling letters, the same field maybe displayed as typing on a virtual keyboard or tracking a gesturespelling the letters in the XR environment. For example, for a fieldthat requires a date, the same filed may be displayed as selecting adate from a calendar with a range of dates in the XR environment. Forexample, for a field that requires an address, the same field may bedisplayed as dropping a pin on a map in the XR environment. For yetanother example, for a field that requires a marital status, the samefield may be displayed as selecting an emoji that represents the maritalstatus.

At step 409, an authorization check may be performed by the XR device202 to confirm the user is authorized to fill out the form and/or makechanges to the form contents. The authorization check may be based onbiometric data, an indication from a different computing device (e.g., amobile phone), and/or an indication of an authorization task performedin the XR environment. The authorization check may comprise a requestfor biometric data associated with the user. The biometric data maycomprise one or more of a signature, a fingerprint, a facial image, etc.The authorization check may comprise an indication, from a differentdevice (e.g., a mobile phone) than the XR device 202, that the user isauthorized to fill out the form. The indication may comprise one or moreof a text message, a telephonic call, a passcode, etc. The authorizationcheck may comprise a second indication of an authorization task,performed by the user, in the XR environment. The second indication ofthe authorization task may comprise completing one more tasks in the XRenvironment, such as moving a block from one location to anotherlocation, correctly identifying images with a car in them, answering asecurity question, etc.

At step 410, the XR device 202 may receive, from the user, data inputfor the fields displayed at step 408. The data input may be entered viaan input method in the XR environment. For each field, the method ofentering data input may be different. For example, one field may requiretouching one option out of a few options presented in the XRenvironment. Another field may require typing on a virtual keyboardpresented in the XR environment. Another field may require tracking afinger or a virtual pen movement such as checking a box presented in theXR environment, writing a word with a finger or a virtual pen on a pieceof virtual paper presented in the XR environment, etc. Another field mayrequire selecting a date from a calendar presented in the XRenvironment. Another field may require dropping a pin on a map presentedin the XR environment to indicate an address. Another field may requireselecting an emoji from a list of emojis presented in the XRenvironment. If the user is in a private setting (such as in a privateroom, or at home), the user may alternatively, and/or additionally,enter the data via voice commands. If the user does not trust the peoplearound them, the XR environment may be accessed only by the user wearingthe XR device 202. In this case, the data input entry might not beexposed to bystanders. The data input may be entered and storedaccording to XR technology providers' security guidelines. Therefore, itmay be more difficult for data breachers to retrieve, restore, and/orrepair a data input entry. These advantages ensure that the formcontents are more secure.

At step 412, the data entered at step 410 may be processed. The data maybe processed by the XR device 202. Alternatively, and/or additionally,the data may be processed by the first computing device 201. The dataprocessing may comprise data encryption. The data encryption may bebased on various data encryption standards and algorithms such as AES,RSA, TripleDES, etc. The data encryption may further add protection andimprove security of the form contents. After the data is encrypted, thedata entered at step 410 may be stored in a first database. The firstdatabase may be a physical, remote, or cloud-based database. For thedata corresponding to private information, there may be a specificsecurity protocol to be incorporated into the data storing in the firstdatabase. The data processing may comprise data obscuring. After thedata corresponding to private information is stored, that data may beobscured from presentation in the XR environment. Only after receiving arequest from the user to view the obscured data, the data may bedisplayed again on the presentation of the form in the XR environment.Obscuring a portion of or all the form contents may further improvesecurity of the form contents.

At step 414, if the XR device 202 determines that non-privateinformation is being requested by one or more fields of the form, thendata input may be entered via a different input method outside of the XRenvironment. Prior to the data input is entered, an authorization checkmay be additionally performed by the XR device 202 to confirm the useris authorized to fill out the form and/or make changes to the formcontents, similarly as outlined in step 409. If the form is digital, thenon-private information may be entered using a digital pen, a mouse, akeyboard, a touchscreen, a voice command receiver, or other digitalinput devices. The non-private information may be entered via the firstcomputing device 201, a second computing device (e.g., a computer, amobile phone, a touch-screen display, etc.), and/or the displaydevice(s) 203 a, audio device(s) 203 b, input/output 203 f, etc.,associated with the XR device 202. If the form is physical (e.g.,printed and on paper), the non-private information may be entered usingan ink pen, a ballpoint pen, a pencil, a highlighter, a stencil, orother manual input stationaries. Entering data digitally or physicallymay run the risk of exposing the data to bystanders. Entering datadigitally may result in temporary data that may be retrieved, restored,and/or repaired to obtain the form contents. Enter data physically mayenable data breachers to retrieve the form contents based on ink traces,even after the filled form is discarded. For non-private information,the need for data security is not as high as the private information.

At step 416, after the non-private information is entered at step 414,the non-private information data may also be processed by dataencryption and/or data obscuring. The data encryption and/or the dataobscuring may be performed with similar methods as outlined in step 412.After the data is processed, the data entered at step 414 may be storedin a second database different from the first database. The seconddatabase may also be a physical, remote, or cloud-based database. Forthe data corresponding to non-private information, the specific securityprotocol to be followed by storing private information data might notneed to be incorporated into the data storing in the second database.Collecting the non-private information and private informationseparately and storing the non-private information and privateinformation in different databases may ensure the security of the formcontents. For instance, if the second database of the non-privateinformation is breached, the first database of the private informationmay still be safe. The first database may require a higher level ofsecurity protection than the second database.

At step 418, after both private information is entered in the XRenvironment at step 410 and non-private information is entered outsideof the XR environment at step 414, the user may be asked to choosewhether they want the form to be destroyed. The XR device 202 maypresent a question in the XR environment asking the user whether theywant the form to be destroyed. The question asking the user whether theywant the form to be destroyed may be alternatively, and/or additionallybe displayed on the first computing device 201 screen. The questionasking the user whether they want the form to be destroyed may be sent,as a message, to a different computing device (e.g., a mobile phone)associated with the XR device 202 (e.g., signed in with the same useraccount). If the form is in a physical form (e.g., printed and onpaper), the form may comprise a reminder at the bottom of the form toask the user whether they want the form to be destroyed.

At step 420, if the user chooses to destroy the form, the user may beprompted to destroy the form in different ways. If the form is physical(e.g., printed and on paper), the user may be instructed to destroy itusing a shredder. The instructions to destroy the physical form such asusing a shredder may be part of the form instructions 310. If the formis digital, the user may be instructed to permanently delete the form.The user may be instructed to delete the form permanently on the firstcomputing device 201 screen. The user may be instructed to destroy theform in the XR environment by dragging the form into an electronic trashcan, where the form may be destroyed permanently. The instructions todestroy the digital form may be displayed on the first computing device201 screen, presented in the XR environment as a sign, and/or presentedin the XR environment as a voice instruction via the audio device(s) 203b.

At step 421, a request to view a filled form may be received. Therequest to view the filled form may be received by the XR device 202.Alternatively, and/or additionally, the request to view the filled formmay be received by the first computing device 201, or a differentcomputing device (e.g., a mobile phone) associated with the XR device202. The request may be to view a filled form, wherein the form wasfilled completely outside the XR environment. The request may be to viewa filled form, wherein the form was filled completely or partially inthe XR environment. The XR device 202 may determine which fields of theform were filled in the XR environment, so as to retrieve the formcontents for these fields from the first database. The XR device 202 maydetermine which fields of the form were filled outside the XRenvironment, so as to retrieve the form contents for these fields fromthe second database.

At step 422, after receiving a request to view a filled form at step421, the XR device 202 may display a representation of the form in theXR environment. The XR device 202 may retrieve, from the first database,and overlay the data entry for the private information on the displayedrepresentation of the form. The XR device 202 may further retrieve, fromthe second database, and overlay the data entry for the non-privateinformation on the displayed representation of the form. The user mayview the entire filled form or a portion of the filled form in the XRenvironment. Alternatively, and/or additionally, all or portions of thedata entry may be provided and sent to the XR device 202 by the firstcomputing device 201. Then the XR device 202 may display therepresentation of the form overlaid with the received data entries.

One or more aspects discussed herein may be embodied in computer-usableor readable data and/or computer-executable instructions, such as in oneor more program modules, executed by one or more computers or otherdevices as described herein. Generally, program modules includeroutines, programs, objects, components, data structures, and the like,that perform particular tasks or implement particular abstract datatypes when executed by a processor in a computer or other device. Themodules may be written in a source code programming language that issubsequently compiled for execution, or may be written in a scriptinglanguage such as (but not limited to) HTML or XML. The computerexecutable instructions may be stored on a computer readable medium suchas a hard disk, optical disk, removable storage media, solid-statememory, RAM, and the like. As will be appreciated by one of skill in theart, the functionality of the program modules may be combined ordistributed as desired in various embodiments. In addition, thefunctionality may be embodied in whole or in part in firmware orhardware equivalents such as integrated circuits, field programmablegate arrays (FPGA), and the like. Particular data structures may be usedto more effectively implement one or more aspects discussed herein, andsuch data structures are contemplated within the scope of computerexecutable instructions and computer-usable data described herein.Various aspects discussed herein may be embodied as a method, acomputing device, a system, and/or a computer program product.

Although the present invention has been described in certain specificaspects, many additional modifications and variations would be apparentto those skilled in the art. For example, a user may prefer to fill outboth private information and non-private information in the XRenvironment. In particular, any of the various processes described abovemay be performed in alternative sequences and/or in parallel (ondifferent computing devices) in order to achieve similar results in amanner that is more appropriate to the requirements of a specificapplication. It is therefore to be understood that the present inventionmay be practiced otherwise than specifically described without departingfrom the scope and spirit of the present invention. Thus, embodiments ofthe present invention should be considered in all respects asillustrative and not restrictive. Accordingly, the scope of theinvention should be determined not by the embodiments illustrated, butby the appended claims and their equivalents.

What is claimed is:
 1. A method comprising: presenting, by a computingdevice and in an extended reality (XR) environment provided by thecomputing device, a representation of a form comprising a plurality offields to be filled out by a user; collecting, from the user during aform-filling occasion, form content requested by the plurality of fieldsto be filled out by the user at least by: receiving, from the user via afirst input method in the XR environment and based on one or more firstfields of the plurality of fields requesting a first type ofinformation, first data indicating the first type of informationrequested by at least one of the one or more first fields to be filledout by the user; and receiving, from the user via a second input methodoutside of the XR environment and based on one or more second fields ofthe plurality of fields requesting a second type of informationdifferent from the first type of information, second data indicating thesecond type of information requested by at least one of the one or moresecond fields to be filled out by the user; storing, based on the firstdata indicating the first type of information and in a first datastorage location, the first data; and storing, based on the second dataindicating the second type of information and in a second data storagelocation different from the first data storage location, the seconddata.
 2. The method of claim 1, further comprising: capturing, using acamera of the computing device, at least a portion of the form;obtaining, based on the portion of the form captured, data correspondingto the form; and generating, based on the data obtained, therepresentation of the form.
 3. The method of claim 1, wherein: the firsttype of information satisfies first criteria indicating that the firsttype of information is private information; and the second type ofinformation satisfies second criteria indicating that the second type ofinformation is non-private information.
 4. The method of claim 1,wherein: the storing the first data comprises storing, in the first datastorage location and using a first security protocol, the first data;and the storing the second data comprises storing, in the second datastorage location and using a second security protocol, the second data.5. The method of claim 1, further comprising: presenting, in the XRenvironment and after the form-filling occasion, a representation of theform in a filled-out state, wherein the representation of the form inthe filled-out state obscures, during the presenting and based on theone or more first fields of the plurality of fields requesting the firsttype of information, the first data received from the user; anddisplaying, in the XR environment and based on receiving a displayrequest during the presenting, at least a portion of the first datareceived from the user.
 6. The method of claim 1, further comprising:determining that the user is authorized to fill out the form based onthe user completing an authorization procedure that comprises a taskperformed by the user in the XR environment.
 7. The method of claim 1,wherein the presenting the representation of the form in the XRenvironment comprises randomizing, in the XR environment, at least oneof a sequencing or a location of at least one field of the plurality offields to be filled out by the user.
 8. The method of claim 1, whereinthe first input method comprises one or more of the following: typing ona virtual keyboard presented in the XR environment, selecting a datefrom a calendar presented in the XR environment, dropping a pin on a mappresented in the XR environment, selecting an option out of a number ofoptions presented in the XR environment, writing on a piece of virtualpaper presented in the XR environment, or checking a virtual boxpresented in the XR environment.
 9. An apparatus comprising: one or moreprocessors; and memory storing instructions that, when executed by theone or more processors, cause the apparatus to: present, in an extendedreality (XR) environment, a representation of a form comprising aplurality of fields to be filled out by a user; collect, from the userduring a form-filling occasion, form content requested by the pluralityof fields to be filled out by the user at least by: receiving, from theuser via a first input method in the XR environment and based on one ormore first fields of the plurality of fields requesting a first type ofinformation, first data indicating the first type of informationrequested by at least one of the one or more first fields to be filledout by the user; and receiving, from the user via a second input methodoutside of the XR environment and based on one or more second fields ofthe plurality of fields requesting a second type of informationdifferent from the first type of information, second data indicating thesecond type of information requested by at least one of the one or moresecond fields to be filled out by the user; store, based on the firstdata indicating the first type of information and in a first datastorage location, the first data; and store, based on the second dataindicating the second type of information and in a second data storagelocation different from the first data storage location, the seconddata.
 10. The apparatus of claim 9, wherein the instructions, whenexecuted by the one or more processors, further cause the apparatus to:present, in the XR environment and after the form-filling occasion, arepresentation of the form in a filled-out state, wherein therepresentation of the form in the filled-out state obscures, during thepresenting and based on the one or more first fields of the plurality offields requesting the first type of information, the first data receivedfrom the user; and display, in the XR environment and based on receivinga display request during the presenting, at least a portion of the firstdata received from the user.
 11. The apparatus of claim 9, wherein theinstructions, when executed by the one or more processors, further causethe apparatus to determine that the user is authorized to fill out theform based on the user completing an authorization procedure thatcomprises a task performed by the user in the XR environment.
 12. Theapparatus of claim 9, wherein the instructions, when executed by the oneor more processors, cause the apparatus to present the representation ofthe form in the XR environment at least by randomizing, in the XRenvironment, at least one of a sequencing or a location of at least onefield of the plurality of fields to be filled out by the user.
 13. Theapparatus of claim 9, wherein the instructions, when executed by the oneor more processors, further cause the apparatus to: determine a locationof the apparatus; obtain, based on the location determined, datacorresponding to the form; and generate, based on the data obtained, therepresentation of the form.
 14. The apparatus of claim 9, wherein theapparatus comprises at least one of: eyewear; or a headset.
 15. Anon-transitory computer-readable medium storing instructions that, whenexecuted by one or more processors, cause a computing device to:present, in an extended reality (XR) environment, a representation of aform comprising a plurality of fields to be filled out by a user;collect, from the user during a form-filling occasion, form contentrequested by the plurality of fields to be filled out by the user atleast by: receiving, from the user via a first input method in the XRenvironment and based on one or more first fields of the plurality offields requesting a first type of information, first data indicating thefirst type of information requested by at least one of the one or morefirst fields to be filled out by the user; and receiving, from the uservia a second input method outside of the XR environment and based on oneor more second fields of the plurality of fields requesting a secondtype of information different from the first type of information, seconddata indicating the second type of information requested by at least oneof the one or more second fields to be filled out by the user; store,based on the first data indicating the first type of information and ina first data storage location, the first data; and store, based on thesecond data indicating the second type of information and in a seconddata storage location different from the first data storage location,the second data.
 16. The non-transitory computer-readable medium ofclaim 15, wherein the instructions, when executed by the one or moreprocessors, further cause the computing device to: present, in the XRenvironment and after the form-filling occasion, a representation of theform in a filled-out state, wherein the representation of the form inthe filled-out state obscures, during the presenting and based on theone or more first fields of the plurality of fields requesting the firsttype of information, the first data received from the user; display, inthe XR environment and based on receiving a display request during thepresenting, at least a portion of the first data received from the user.17. The non-transitory computer-readable medium of claim 15, wherein theinstructions, when executed by the one or more processors, further causethe computing device to determine that the user is authorized to fillout the form based on the user completing an authorization procedurethat comprises a task performed by the user in the XR environment. 18.The non-transitory computer-readable medium of claim 15, wherein theinstructions, when executed by the one or more processors, cause thecomputing device to present the representation of the form in the XRenvironment at least by randomizing, in the XR environment, at least oneof a sequencing or a location of at least one field of the plurality offields to be filled out by the user.
 19. The non-transitorycomputer-readable medium of claim 15, wherein the instructions, whenexecuted by the one or more processors, further cause the computingdevice to: determine a location of the computing device based on atleast one of: a search history associated with the user; a navigationrequest submitted, to a map application, by the user; an electroniccommunication sent, via a messaging application, by the user; or asocial media post posted, via a social media application, by the user;obtain, based on the location determined, data corresponding to theform; and generate, based on the data obtained, the representation ofthe form.
 20. The non-transitory computer-readable medium of claim 15,wherein the instructions, when executed by the one or more processors,cause the computing device to: store the first data in the first datastorage location at least by storing, in a first database and using afirst type of encryption, the first data; store the first data in thesecond data storage location at least by storing, in a second databasedifferent from the first database and using a second type of encryptiondifferent from the first type of encryption, the second data.